CVE-2015-0295

· N/AModified

← All CVEs

CVSS v3.1

N/A

EPSS

6.31%

Published

Mar 25, 2015

Modified

May 6, 2026

Public PoC / Exploit

All weaponized →

No public PoC or exploit code indexed for this CVE.

Links to public security research (Exploit-DB, Nuclei, Trickest, GitHub) for defensive use only.

Description

The BMP decoder in QtGui in QT before 5.5 does not properly calculate the masks used to extract the color components, which allows remote attackers to cause a denial of service (divide-by-zero and crash) via a crafted BMP file.

Weaknesses (CWE)

CWE-189

Affected Products (5)

fedoraproject · fedoravulnerable

opensuse · opensusevulnerable

digia · qtvulnerable

References (20)

http://lists.fedoraproject.org/pipermail/package-announce/2015-March/150800.html

http://lists.fedoraproject.org/pipermail/package-announce/2015-March/150940.html

http://lists.fedoraproject.org/pipermail/package-announce/2015-March/151034.html

http://lists.fedoraproject.org/pipermail/package-announce/2015-March/151121.html

http://lists.fedoraproject.org/pipermail/package-announce/2015-March/151138.html

http://lists.fedoraproject.org/pipermail/package-announce/2015-March/151352.html

http://lists.opensuse.org/opensuse-updates/2015-03/msg00068.html

http://lists.qt-project.org/pipermail/announce/2015-February/000059.html

Vendor Advisory

http://www.securityfocus.com/bid/73029

http://www.ubuntu.com/usn/USN-2626-1